Paypal upgrades - do we need to do anything?

[aggie]

Today I'm getting a warning from paypal that my integration with E-junkie is not PCI compliant and need to be upgraded to TLS 1.2. Has that been done? Do I need to do anything?

[stephg]

I'm also getting a warning from paypal (when I log in) that my integration with E-junkie is not PCI compliant. It states that "immediate action is required" to fix the issue.

[my3hens]

I’m getting the same warning when I log in.

[alain]

I have no problems but I updated my site to PCI and TLS 1.2. Just got an order through eJunkie paid via paypal in fact so things are working fine.

[aggie]

So is this something ejunkie needs to do on their end, or website owners need to do? I have no idea what this meansn

[alain]

You may need to update your site to TLS 1.2 and be PCI compliant. In my case my webhosting company did it for me. It is done on the server level. They also added a certificate to my site. If you have web hosting support just ask the techs to do it for you.

[alain]

The real issue is not the paypal warning which comes up on paypal.com when you log in. The real issue is whether or not you can process transactions. If you can, then disregard the warning. I saw the same warning you mentioned today but I my paypal and eJunkie transactions are going through so it's not relevant to me.

[E-junkie_Guru]

PayPal has confirmed to us the warnings that appear on login to their site are due to issues they'd logged going back prior to June 5th, and that they are not seeing any issues logged since June 6th for any merchant we've asked them to check. The fact that you are still processing payments successfully now, after their cutoff deadline, confirms that things are set up and working as they require.

BTW, when you use E-junkie it's not necessary to upgrade your site to use HTTPS or TLS 1.2, as your own server is not interfacing with PayPal's system at all, nor is your site handling any payment data subject to PCI-DSS compliance requirements; we handle all of that for you at our end.

[alain]

Thank you for your response. I upgraded to TLS 1.2 because I process some payments directly via paypal. However I did not need to upgrade to https because the paypal buttons I use don't lead to a shopping cart on my site but instead go directly to paypal and use their https cart